Robert Kaussow
09fb42d099
All checks were successful
continuous-integration/drone/push Build is passing
37 lines
968 B
YAML
37 lines
968 B
YAML
---
|
|
- block:
|
|
- name: Override default .bashrc for given users
|
|
template:
|
|
src: etc/bashrc.j2
|
|
dest: "{{ item }}"
|
|
owner: root
|
|
group: root
|
|
mode: 0644
|
|
loop: "{{ users_bash_bashrc_overrides }}"
|
|
|
|
- name: Setup custom bash profile at '/etc/profile.d/custom.sh'
|
|
template:
|
|
src: etc/profile.d/custom.sh.j2
|
|
dest: /etc/profile.d/custom.sh
|
|
owner: root
|
|
group: root
|
|
mode: 0644
|
|
|
|
- name: Set umask to /etc/login.defs
|
|
lineinfile:
|
|
path: /etc/login.defs
|
|
regexp: '^(?P<umask>UMASK\s+).+'
|
|
line: \g<umask>{{ users_global_umask }}
|
|
backrefs: yes
|
|
state: present
|
|
|
|
- name: Enforcing minimum password lifetime
|
|
lineinfile:
|
|
path: /etc/login.defs
|
|
regexp: '^(?P<passmin>PASS_MIN_DAYS\s+).+'
|
|
line: \g<passmin>{{ users_pass_min_day }}
|
|
backrefs: yes
|
|
state: present
|
|
become: True
|
|
become_user: root
|